Privacy Policy

Last updated: February 27, 2026

1. Data Controller

The data controller responsible for processing your personal data is:
VILQ
Email: grzegorz@vilq.com
Based in Poland.

2. What Data We Collect

We collect and process the following personal data:

• Account data: name, surname, email address, password (stored as a hash).
• Order data: shipping and billing addresses (name, street, city, zip code, country, phone number), order details, payment status.
• Contact form data: name, email address, message content, and optionally attached images and car details.
• Technical data: IP address, browser type, pages visited — collected automatically through server logs and cookies.

3. Purpose and Legal Basis

We process your data for the following purposes:

• Contract performance (Art. 6(1)(b) GDPR): processing orders, managing your account, delivering products, handling returns and warranty claims.
• Legal obligation (Art. 6(1)(c) GDPR): tax and accounting records, fraud prevention.
• Legitimate interest (Art. 6(1)(f) GDPR): improving our website, responding to contact inquiries, ensuring security.
• Consent (Art. 6(1)(a) GDPR): optional cookies for analytics and live chat functionality. You can withdraw consent at any time.

4. Cookies

This website uses cookies:

• Essential cookies: session management, CSRF protection, cookie consent preference. These are strictly necessary and do not require consent.
• Third-party cookies: Tawk.to (live chat) and Stripe (payment processing) may set their own cookies. These are loaded only after you accept cookies via the consent banner.

You can manage cookies through your browser settings at any time. Disabling essential cookies may prevent the website from functioning correctly.

5. Third-Party Services

We share your data with the following third parties only as necessary:

• Stripe, Inc. — payment processing. Stripe processes your payment information in accordance with their Privacy Policy. Data may be transferred to the US under Standard Contractual Clauses.
• Shipping carriers (DPD, GLS, FedEx) — your name and shipping address are shared to deliver your order.
• Tawk.to — live chat widget. If you use the chat, your messages and basic browser data are processed by Tawk.to per their Privacy Policy.

We do not sell your personal data to any third party.

6. Data Retention

• Account data: retained as long as your account is active. You may request deletion at any time.
• Order data: retained for 5 years after the order date, as required by Polish tax and accounting law.
• Contact messages: retained for up to 2 years, or until the inquiry is resolved.
• Server logs: retained for up to 90 days.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data (Art. 15 GDPR).
• Rectify inaccurate data (Art. 16 GDPR).
• Erase your data ("right to be forgotten") (Art. 17 GDPR).
• Restrict processing (Art. 18 GDPR).
• Data portability — receive your data in a machine-readable format (Art. 20 GDPR).
• Object to processing based on legitimate interest (Art. 21 GDPR).
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at grzegorz@vilq.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption, hashed passwords, CSRF protection, and access controls. However, no method of transmission over the Internet is 100% secure.

9. International Transfers

Some of our service providers (Stripe, Tawk.to) may process data outside the European Economic Area. Where this occurs, transfers are safeguarded by Standard Contractual Clauses or equivalent mechanisms approved by the European Commission.

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority:
Prezes Urzędu Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
https://uodo.gov.pl

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page.

12. Contact

For privacy-related questions, contact us at:
Email: grzegorz@vilq.com
Website: vilq.com/contact